关键词: 域控制器；功能安全；扭矩控制；监控策略

Abstract: The domain controller is a controller that integrates multiple electronic control units. It makes the overall vehicle cost lower and control more efficient. Integrating the functions of the vehicle control unit (VCU) into the domain controller helps optimize and enhance functions such as torque control and fault diagnosis. The main purpose of torque control is to control the motor output torque safely to meet the driver's demands. This paper mainly proposes a torque monitoring strategy for the domain controller based on the E-GAS three-layer safety architecture to separate the torque control and torque monitoring functions. At the same time, based on the fault tree analysis (FTA) method, a safety tree analysis of the torque control function is conducted to derive relevant safety measures for development. Finally, in response to program flow monitoring failure, occasional watchdog short-term feeding anomalies, failure to send application messages, and loss of vehicle power, it is proposed to store snapshots of key application layer data in random access memory (RAM). When the watchdog function is restored, the application layer gradually returns to normal operation based on the snapshot data and input data. After bench testing, the results show that this architecture design can achieve torque control functions and enter a safe state in a timely manner in failure modes, and meet safety goals.

Key words: domain controller; functional safety; torque control; monitoring strategy